This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
File:                     LzE27RCZhYClF9lZiryjPZumZZk.mft (raw, json)
Hash identifier:          l1gvdFwMOp0UIAdCXIPz8UnwcE524m19aUu/dGMXAbg=
Subject key identifier:   B4:A7:78:5B:57:B2:BC:16:D7:21:E7:F1:85:05:1D:DE:80:E9:17:E4
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Certificate issuer:       /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial:       019AF208C954A2A32910A801FDBBFB0D5D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
Manifest number:          11B5
Signing time:             Sat 06 Dec 2025 05:00:53 +0000
Manifest this update:     Sat 06 Dec 2025 05:00:53 +0000
Manifest next update:     Sun 07 Dec 2025 05:00:53 +0000
Files and hashes:         1: 3Q4-nm9Afpxwl-rsuAE0uraA2Ho.roa (hash: w0/s8wW3wnSLtMZE2Dd4d4ibLqmaSIOhu54oA3SxPvE=)
                          2: HDL5ZJqNUyVr9DbXIHa7pOPbkPY.roa (hash: iNFv7uh4fJNYsidDC1mbFWGoIExhoy9Ks/MOwn2QcMo=)
                          3: LzE27RCZhYClF9lZiryjPZumZZk.crl (hash: G9rgzsrIBrBOLE9I5qZhu0fRd0WZWgAb0OF8n9FOcic=)
                          4: dHr3S3MtNvYw9zPAytJUJf5Polg.roa (hash: 6ik71U5mDCDLej/D58qufytoq9ZgmhfMCzyzKL+xxNA=)
                          5: xYnFzzsD7iGLZFG3m7HFCBMtp2E.roa (hash: W3AHQ2GuMJRuqPrOv5nSrVbrayQVkMMCq5xQ40+kvG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:08:c9:54:a2:a3:29:10:a8:01:fd:bb:fb:0d:5d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
        Validity
            Not Before: Dec  6 05:00:53 2025 GMT
            Not After : Dec  7 05:00:53 2025 GMT
        Subject: CN=b4a7785b57b2bc16d721e7f185051dde80e917e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:73:66:23:9f:62:f2:7f:9f:09:52:ff:c5:
                    2a:38:d9:6a:6b:c0:a9:67:0e:37:fa:24:48:17:bc:
                    02:e6:e9:32:b9:47:23:36:b7:cc:47:72:35:35:78:
                    f5:bd:75:19:1a:8e:93:13:41:33:3a:94:bc:3c:7f:
                    39:36:6f:d5:e4:92:bb:23:23:26:33:30:5b:53:7f:
                    9b:22:e0:98:23:30:fb:5e:1e:d6:59:0d:ad:fc:55:
                    08:5c:a8:8b:2a:e7:b2:c0:63:6c:63:a6:07:d5:0d:
                    b8:9f:09:a8:26:c5:0c:d4:76:ae:4f:a4:b7:1f:43:
                    71:2d:54:d2:e9:51:46:6a:32:31:a2:41:57:1e:09:
                    7d:9f:f1:2a:ac:7f:96:30:c9:25:32:79:68:4e:4e:
                    16:c4:14:af:5e:19:47:19:73:10:8a:b6:0e:67:41:
                    06:5e:94:b8:2b:e3:fb:91:90:cf:98:34:80:e4:4e:
                    4b:56:c6:4f:75:8a:4d:bc:1b:ae:b4:f0:c2:a4:b9:
                    12:ee:2c:fa:8b:a3:c8:fc:41:fe:1a:78:be:cf:9b:
                    df:90:31:ac:26:ad:81:82:f8:f6:d7:43:10:ca:42:
                    01:ea:ad:3c:53:63:ae:35:09:4c:5c:5d:cc:30:2d:
                    13:eb:39:d6:5e:fa:a8:dd:75:b5:40:07:da:05:e9:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A7:78:5B:57:B2:BC:16:D7:21:E7:F1:85:05:1D:DE:80:E9:17:E4
            X509v3 Authority Key Identifier:
                keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:0e:f8:c7:c8:80:85:4a:7b:4c:de:75:fb:07:c4:2d:bc:
         4d:b5:ca:1d:9d:87:bb:0c:e9:f4:23:1c:41:bd:31:e9:50:43:
         87:af:73:7f:07:45:5c:2b:a5:e6:3d:01:fa:00:b4:14:2a:8c:
         a2:1f:f2:f7:f1:3d:b1:ae:fa:cb:ba:38:bb:b1:3e:11:82:e5:
         77:da:01:43:b9:94:3b:a9:20:a5:d8:52:95:60:d7:42:57:3c:
         ab:5e:12:31:f2:f3:33:42:cf:74:c5:83:76:19:bd:ab:da:de:
         61:95:ec:5c:21:97:59:fd:91:bd:dd:4d:de:07:d8:d3:3c:b0:
         f9:cd:7d:6f:fe:27:a2:04:7e:4b:61:45:70:b6:bf:46:b7:0c:
         25:c3:48:9a:d4:05:72:e2:97:ad:1e:c0:67:37:ad:9b:7a:52:
         44:52:f4:5c:af:53:18:f5:89:77:04:26:b2:7e:40:fe:f0:a4:
         af:cf:85:44:41:77:a2:47:3c:e9:a9:37:78:c3:1b:00:7c:97:
         9c:ca:e1:46:45:ad:5b:c2:22:1c:fa:a9:54:6e:67:6a:ca:4b:
         5b:f6:c3:dd:f1:70:eb:e4:f8:49:fa:c0:3f:b6:fb:ff:78:49:
         2a:5d:63:b0:2e:4e:8e:b8:8f:a3:d1:dd:dd:03:03:c1:40:43:
         ed:7f:67:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZryCMlUoqMpEKgB/bv7DV0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMzEzNmVkMTA5OTg1ODBhNTE3ZDk1OThhYmNhMzNkOWJh
NjY1OTkwHhcNMjUxMjA2MDUwMDUzWhcNMjUxMjA3MDUwMDUzWjAzMTEwLwYDVQQD
EyhiNGE3Nzg1YjU3YjJiYzE2ZDcyMWU3ZjE4NTA1MWRkZTgwZTkxN2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKZzZiOfYvJ/nwlS/8UqONlqa8Cp
Zw43+iRIF7wC5ukyuUcjNrfMR3I1NXj1vXUZGo6TE0EzOpS8PH85Nm/V5JK7IyMm
MzBbU3+bIuCYIzD7Xh7WWQ2t/FUIXKiLKueywGNsY6YH1Q24nwmoJsUM1HauT6S3
H0NxLVTS6VFGajIxokFXHgl9n/EqrH+WMMklMnloTk4WxBSvXhlHGXMQirYOZ0EG
XpS4K+P7kZDPmDSA5E5LVsZPdYpNvBuutPDCpLkS7iz6i6PI/EH+Gni+z5vfkDGs
Jq2Bgvj210MQykIB6q08U2OuNQlMXF3MMC0T6znWXvqo3XW1QAfaBem5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSneFtXsrwW1yHn8YUFHd6A6RfkMB8GA1UdIwQY
MBaAFC8xNu0QmYWApRfZWYq8oz2bpmWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYt
OTI5ZjEwNjYzMGYxLzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mOTBkODMtMDJiZS00ZTVmLWJkMGYtOTI5ZjEwNjYzMGYx
LzEvTHpFMjdSQ1poWUNsRjlsWmlyeWpQWnVtWlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOgO+MfI
gIVKe0zedfsHxC28TbXKHZ2Huwzp9CMcQb0x6VBDh69zfwdFXCul5j0B+gC0FCqM
oh/y9/E9sa76y7o4u7E+EYLld9oBQ7mUO6kgpdhSlWDXQlc8q14SMfLzM0LPdMWD
dhm9q9reYZXsXCGXWf2Rvd1N3gfY0zyw+c19b/4nogR+S2FFcLa/RrcMJcNImtQF
cuKXrR7AZzetm3pSRFL0XK9TGPWJdwQmsn5A/vCkr8+FREF3okc86ak3eMMbAHyX
nMrhRkWtW8IiHPqpVG5naspLW/bD3fFw6+T4SfrAP7b7/3hJKl1jsC5OjriPo9Hd
3QMDwUBD7X9nBQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:31:33 2025 by rpki-client